Rapatrie dans dev les mises à jour de dépendances mergées sur main : #142 (SonarQube ignoré pour Dependabot), #129 checkout v7, #130 setup-uv v7, #132 setup-node v7, #128 upload-artifact v7, #131 download-artifact v8, #127 Node 26 (image et CI frontend), #126 nginx 1.31-alpine, #133 pandas 3.0.6 et ruff 0.16.8, #134 Angular 22.1.7, jsdom 30, prettier 3.9.8 (TypeScript 6 et vitest 4 conservés, majeures ignorées côté Dependabot). Conflit README.md : statuts « En place » de main, « Quatre DAGs » de dev (#138).
47 lines
1.1 KiB
Docker
47 lines
1.1 KiB
Docker
# ==================
|
|
# Étape 1 : Build
|
|
# ==================
|
|
|
|
# Image pour frontend
|
|
FROM node:26-alpine3.22 AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
COPY package.json package-lock.json* ./
|
|
|
|
# Installation des dépendances du projet avec npm
|
|
RUN npm ci
|
|
|
|
# Copie du code source vers le conteneur
|
|
COPY . .
|
|
|
|
# Build
|
|
RUN npm run build
|
|
|
|
# ==================
|
|
# Étape 2 : Runner
|
|
# ==================
|
|
|
|
|
|
FROM nginx:1.28-alpine AS runner
|
|
|
|
# Copie de la configuration de nginx
|
|
COPY --chown=root:root --chmod=755 nginx.conf /etc/nginx/nginx.conf
|
|
|
|
# Copy the static build output from the build stage to Nginx's default HTML serving directory
|
|
COPY --chown=root:root --chmod=755 --from=builder /app/dist/*/browser /usr/share/nginx/html
|
|
|
|
# Create necessary directories with proper permissions for nginx
|
|
RUN mkdir -p /var/log/nginx /var/cache/nginx && \
|
|
chown -R nginx:nginx /var/log/nginx /var/cache/nginx /usr/share/nginx/html
|
|
|
|
# Use a non-root user for security best practices
|
|
USER nginx
|
|
|
|
# Frontend : port 3000
|
|
# Backend : port 8000
|
|
EXPOSE 3000
|
|
|
|
# Start Nginx directly with custom config
|
|
ENTRYPOINT ["nginx", "-c", "/etc/nginx/nginx.conf"]
|
|
CMD ["-g", "daemon off;"] |